I guess it is time to put things in ansible for my infra.
This setup consists of public ansible configuration, where my private ansible configuration is added as a submodule. My private collection does not contain secrets, but sensitive enough that I simply don't want to announce to the Internet(tm).
NB: Doesn't use onepassword.connect yet, but keeping it for now.
$ ansible-galaxy collection install onepassword.connect
$ ansible-galaxy collection install community.general
Obtained via 1password integrations.
$ ansible-playbook --connection=local --inventory 127.0.0.1 --limit 127.0.0.1 playbooks/$HOSTNAME/playbook.yaml --ask-become-pass
$ ansible-playbook --connection=local --inventory 127.0.0.1 --limit 127.0.0.1 playbooks/orgrimmar/playbook.yaml --ask-become-pass
$ ansible-playbook --connection=local --inventory 127.0.0.1 --limit 127.0.0.1 playbooks/qhira/playbook.yaml --ask-become-pass
Check facts:
$ ansible --connection=local -i 127.0.0.1, all -m setup | less -R